FIG. 1C 




ao: = NOT busy AND (Input =B) 
ai: = busY 
a2: = N0T stall 

a3:=stall 

C2: = (output =F(B)) 



FIG. 2a 




FIG. 2b 




FIG. 5a 



Sim(e): = 0 for all edges e in 
assertion graph c if Heacl(e) ^ v, 
and Ant(e) otherwise. 



Mark all edges active. 



Are any edges 
jctivej, 
yes 



select an active edge e. 
Mark e not active. 
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312 



313 



no 



-> Done 
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Slm(e) :=Sim(e)u( 

^ve- iTaiKe ) = Head(e)<Ant(e) n POSt(Sim(e')))) 
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FIG. 3b 



Mark all edges active. 
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Are any edges 

^activejt 
yes 



no 



■> Done 



Select an active edge e. 
Mark e not active. 



323 



i 



Ant(e) : = Ant(e) n ( 

'-^ve' I Head(e') =Tail(e)^ Pre(Ant(e'))) 
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Mark all fanlns of e active. 
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FIG. 5a 




FIG. 6a 



strengthen antecedents for alh 
edges in assertion graph C. 



Compute simulation relation 

using the strengthened 
antecedents for all edges in 
assertion graph C . 
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Compare simulation relation set Jx^^^^ 

of each edge as a subset of 
consequence set of each edge. 



FIG. 6b 



Ant *(e):= strengthened 
antecedents for all edges e in 
assertion graph C. 
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Sim*(e):= simulation relation 
using Ant*(e) as the antecedent 
labels for all edges e in assertion 
graph c . 



yes 



■I- 



Mark all edges e active. 



select an active edge e. 
Mark e not active. 



i 



Is Sim*(e) contained 
by Cons(e)? 
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no 



► SATISFIED 
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no 



^ NOT 

SATISFIED 
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FIG. 7 



{So; Si, $2; Ss, Sa, Ss, Se} 
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{So, Si, S2, S3, Sa, Ss} • • • • • • {Si, S2, S3, Sa, Ss, Se}, 





{So, Si, S2, Ss, Sa} 




• • • 



• • • {S2, Ss, Sa, Ss, Se} 




{So, Si, S2, Ss} 




• • • {Ss, Sa, Ss, Se} 





{So, Si, S2} •••< ••• ••• {Sa, Ss, Se} 



^ _ . ^ ... 

\ {So, Si}f{Si, S2}^')«v{S2AS3}^'{Ss, Sa}^v{S«; S5}^'{S5, Se}\ 
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Abstract model M to obtain 



Abstract assertion graph c to 
obtain Ca. 



Compute simulation relation 

using the abstracted 
antecedents for all edges in 
assertion graph to obtain 
Sim^*. 



Concretize Sim^* to obtain 
Simc^Sim*. 



FIG. 8a 

^ 811 
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815 



Compare Simc (e) of each edge e 
as a subset of consequence set 
Cons(e) of each edge e. 
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Abstract model M to obtain M^/ 



Abstractassertion graph c to 
obtain Ca. 

i 

Strengthen antecedents for all 
edges in assertion graph to 
obtain Ant^*. 

i 

Compute simulation relation 

using the strengthened 
antecedents for all edges in 
assertion graph to obtain 
Sim^*. 



FIG. 8b 
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Compare Simc(e) of each edge e 
as a subset of consequence set 
Cons(e) of each edge e. 
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strengthen antecedents for all 
edges in assertion graph C to 
obtain Ant*. 

i 

Abstract model M to obtain ivi^. 



Abstract strengthened 
assertion graph C to obtain c^. 



Compute simulation relation 

using the abstracted 
strengthened antecedents for 
all edges in assertion graph Ca 
to obtain Sim^*. 



FIG. 8C 

^ 833 



Compare Simc (e) of each edge e 
as a subset of consequence set 
Cons(e) of each edge e. 
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FIG. 9 
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FIG. lla 




FIG. 12a 



SilTlsCv, v:): = ((initE{\/, v:)aU) Us 

Ants(v, V)) where initE is the 
predicate for outgoing edges 
from initial vertex vl. 
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Sims (V, v:) : = Sims (y, V) ug (us vbeB'" 
(Ant(y, y:)ns Posts (Sims (y-, y))) [b/ y l) 



1215 




FIG. 12b 



Ants(y-, v) is the original 
Ants y) from Cs . 



Ants(y-, y) : = Antg (y, y) ng ( 
Us vbeB-^ Pr^s ^Ants (y, yl)) lb/ V}) 
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► Done 



